MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6b042cf5108de1d6ec25035e1037d1439ef3e9421028bee2c5e1d67adf432aff. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6b042cf5108de1d6ec25035e1037d1439ef3e9421028bee2c5e1d67adf432aff
SHA3-384 hash: 23a729d908bd27acaedeec25b44931d18143d0fabc4df6a2f3d9bb8b906f37cef805910c27db0181d0b38c99b31740a2
SHA1 hash: 217ffb719e3361ea890ca0797f858f47ece87387
MD5 hash: adf6ec13cf7b5dad46c06b9f5c76c2ee
humanhash: burger-carolina-ohio-september
File name:6b042cf5108de1d6ec25035e1037d1439ef3e9421028bee2c5e1d67adf432aff
Download: download sample
Signature AgentTesla
Create hunting rule
File size:541'240 bytes
First seen:2020-10-12 11:48:02 UTC
Last seen:2020-10-14 10:04:17 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:pZP5skgHIYXaBUjb/GGKf5f9TOMrI54SDky/8Gokns:pPOvXv/Y9RrI5JDtrJs
TLSH B5B42350D399D0FFFEFE50F6EE9383957138C18576AC8558C5A207CBEAC1276068B912
Reporter madjack_red
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
7
# of downloads :
88
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/6b042cf5108de1d6ec25035e1037d1439ef3e9421028bee2c5e1d67adf432aff/
Threat name:
ByteCode-MSIL.Infostealer.Stelega
Create hunting rule
Status:
Malicious
First seen:
2020-10-11 23:41:02 UTC
File Type:
Binary (Archive)
Extracted files:
17
AV detection:
22 of 29 (75.86%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=nmccz5iqrxq5n3bfanpban6riopph2kccaul5ywf4hlhvx2dfl7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/6b042cf5108de1d6ec25035e1037d1439ef3e9421028bee2c5e1d67adf432aff

File information

The table below shows additional information about this malware sample such as delivery method and external references.

AgentTesla

zip 6b042cf5108de1d6ec25035e1037d1439ef3e9421028bee2c5e1d67adf432aff

(this sample)

AgentTesla

Executable exe c0a17f9f4dbacd527080d7211402f75a2a6308e288fed4561030e512ccbca7bd

  
Dropping
SHA256 c0a17f9f4dbacd527080d7211402f75a2a6308e288fed4561030e512ccbca7bd
  
Dropping
MD5 f23d783b86015506bae8848c83ac8273

Comments